This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa
File:                     ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa (raw, json)
Hash identifier:          LOcOPdTPMwU88SaiUEKH4Cv4Nu5AyAkR/N3Rglqnklg=
Subject key identifier:   B6:A7:4F:89:3E:76:4E:0D:6B:69:0E:EF:76:B9:19:CC:F7:5E:D4:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0E105A7FCF175A3F490297721689AAF388D14703
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa
Signing time:             Wed 12 Nov 2025 01:21:20 +0000
ROA not before:           Wed 12 Nov 2025 01:21:20 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        65.9.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:10:5a:7f:cf:17:5a:3f:49:02:97:72:16:89:aa:f3:88:d1:47:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:21:20 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=7f63748c2ec2c365af0dbcf02931644e7a24ac3c68df7fde9b939b71478e24c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:8d:dc:8f:12:61:36:14:a0:8a:61:dd:a4:
                    d7:8b:95:de:3a:ff:3a:66:51:41:ad:01:b5:da:9f:
                    d2:e9:b6:be:ba:fb:9b:49:b7:7a:72:db:50:00:17:
                    50:ff:9b:b6:4c:f2:9d:fb:50:e4:6a:a7:96:5d:45:
                    4a:4b:a3:ca:fc:5c:08:5e:b2:8c:ad:07:60:4b:c7:
                    f7:dd:0b:ae:cf:bd:6f:69:43:1e:2a:e0:a0:17:f3:
                    80:53:ff:6e:4b:ea:0b:22:a9:c1:ab:5f:28:24:82:
                    cc:49:91:03:e7:8a:4b:9e:1d:4a:c2:82:ac:75:94:
                    65:1b:35:a5:a8:70:d8:ed:77:c7:55:21:17:4a:5e:
                    9d:61:27:6d:ec:32:fd:de:e4:44:01:22:e0:b0:41:
                    17:8e:e3:43:9e:fa:61:e9:1e:e7:fc:3a:ec:f6:a6:
                    79:9e:e7:8b:a9:29:46:80:d9:1c:0c:21:cb:aa:4a:
                    d3:65:d4:01:0f:cb:a1:af:aa:b8:dd:ea:e6:3a:98:
                    6d:f1:2e:3f:6d:c4:5a:83:30:b2:c1:de:35:c0:f8:
                    6e:97:47:30:db:22:7f:8f:7a:04:89:00:e4:77:d9:
                    4e:5b:56:8c:ec:3d:36:70:e2:6a:53:cf:fb:77:f3:
                    b2:bc:34:10:0e:8f:b0:b5:bc:9f:cf:77:65:7f:b0:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:4F:89:3E:76:4E:0D:6B:69:0E:EF:76:B9:19:CC:F7:5E:D4:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.9.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:10:14:08:21:73:80:e2:79:84:90:ee:57:f3:e4:1b:a3:8d:
         ce:00:7e:a3:b7:ee:22:b9:ed:31:f8:56:c7:ae:02:db:81:a6:
         76:3b:32:91:9b:4a:17:29:b1:2e:78:dc:66:b4:18:0e:bd:98:
         04:dc:0a:aa:df:79:e8:9a:d7:e9:5c:30:39:04:1f:cd:68:bc:
         16:83:93:a1:70:93:cd:50:5f:fb:75:c2:e4:67:ca:1a:ff:9e:
         10:f9:c9:d8:d2:34:e7:46:80:63:69:96:11:16:c1:fc:82:9a:
         44:e9:27:b1:b7:e3:d6:3f:53:ce:eb:c8:67:4b:66:a4:da:6c:
         a7:e4:29:ad:3a:f2:e1:74:e4:62:1f:8d:72:7e:61:9a:03:4b:
         71:a7:ab:58:be:b6:39:e3:cd:32:36:c8:f9:1f:2b:82:1d:11:
         c6:8f:1c:0f:5b:b4:39:43:c9:2c:10:d0:80:e7:1f:ef:69:05:
         cb:17:fb:46:8d:b4:fb:e7:a0:20:36:20:a7:59:df:2c:4b:9b:
         c0:ed:30:cf:1c:9c:ce:77:37:79:ca:88:de:f0:31:e5:05:93:
         d9:d1:c6:f5:a4:b6:92:e9:be:d3:7b:93:9c:3c:de:b9:24:f4:
         14:35:30:21:cb:9e:41:90:19:a7:be:1e:1f:67:37:46:d1:de:
         5d:d4:ee:c5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDhBaf88XWj9JApdyFomq84jRRwMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDEyMTIwWhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZjYzNzQ4YzJlYzJjMzY1YWYwZGJjZjAyOTMxNjQ0ZTdh
MjRhYzNjNjhkZjdmZGU5YjkzOWI3MTQ3OGUyNGMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8U43cjxJhNhSgimHdpNeLld46/zpmUUGtAbXan9Lptr66
+5tJt3py21AAF1D/m7ZM8p37UORqp5ZdRUpLo8r8XAhesoytB2BLx/fdC67PvW9p
Qx4q4KAX84BT/25L6gsiqcGrXygkgsxJkQPnikueHUrCgqx1lGUbNaWocNjtd8dV
IRdKXp1hJ23sMv3e5EQBIuCwQReO40Oe+mHpHuf8Ouz2pnme54upKUaA2RwMIcuq
StNl1AEPy6Gvqrjd6uY6mG3xLj9txFqDMLLB3jXA+G6XRzDbIn+PegSJAOR32U5b
VozsPTZw4mpTz/t387K8NBAOj7C1vJ/Pd2V/sEktAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtqdPiT52Tg1raQ7vdrkZzPde1EYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RkZmY3MWE5LTFmODQtNGVkNC04YjZlLTU0YWNjOGEzODAxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCY8wDQYJKoZIhvcNAQELBQADggEBAJAQFAghc4DieYSQ7lfz5Bujjc4A
fqO37iK57TH4VseuAtuBpnY7MpGbShcpsS543Ga0GA69mATcCqrfeeia1+lcMDkE
H81ovBaDk6Fwk81QX/t1wuRnyhr/nhD5ydjSNOdGgGNplhEWwfyCmkTpJ7G349Y/
U87ryGdLZqTabKfkKa068uF05GIfjXJ+YZoDS3Gnq1i+tjnjzTI2yPkfK4IdEcaP
HA9btDlDySwQ0IDnH+9pBcsX+0aNtPvnoCA2IKdZ3yxLm8DtMM8cnM53N3nKiN7w
MeUFk9nRxvWktpLpvtN7k5w83rkk9BQ1MCHLnkGQGae+Hh9nN0bR3l3U7sU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:44 2025 by rpki-client